CloudNet: Enterprise. AT&T Labs Research, Joint work with: Timothy Wood, Jacobus van der Merwe, and Prashant Shenoy

Transcription

1 CloudNet: Enterprise Ready Virtual Private Clouds K. K. Ramakrishnan AT&T Labs Research, Florham Park, NJ Joint work with: Timothy Wood, Jacobus van der Merwe, and Prashant Shenoy

2 Vision and Research Direction We have been working towards making compute and storage resources location transparent for enterprises, and applications in general Enable Location of Compute and Storage resources across data centers Ensure Transparency and Security Minimize performance impact from having remote resources Facilitate Migration of Resources in a Transparent and Seamless manner With as little application impact as possible Provide capability for Disaster Recovery Remote resources need to be far enough away to avoid sharing of risk between local and remote resources Minimum RPO/RTO to minimize impact on enterprise operations Page 2

3 Virtual Private Clouds A Virtual Private Cloud is A secure collection of server, storage, and network resources spanning one or more cloud data centers That is seamlessly connected to one or more enterprise sites VM VM Enterprise Sites VM VM Cloud Sites Virtual Private Networks (VPNs) Layer 3 and 2 MPLS based VPNs Created by network provider with no end host configuration Already used by many businesses! Page 3

4 For the customer: VPC Benefits Isolates network & compute resources Cloud resources are only accessible through VPN Simplifies deployment since cloud looks same as local resources For the service provider: Provides mechanism for control over resource reservation within provider network Simplifies management of multiple data centers by combining them into large resource pools Page 4

5 Cloud Manager CloudNet Allocates computation and storage resources Manages VLAN assignment within cloud network Network Manager Creates and configure VPN endpoints Reserves network resources Network Manager Routers Customer Edge Cloud Manager Provider Edge VPN VPN VLAN VLAN VM VM VM VM Page 5

6 CloudNet System Components - Network Domain Network Manager IRSCP VPN A VPN B VPN B VPN A Network side: Dynamic VPN mapping with IRSCP On connected to cloud platform Pre-configure VPN interfaces with Route-targets IRSCP re-writes the RTs as needed to dynamically map these interfaces into specific VPNs Page 6

7 CloudNet System Components - Remapping Network Domain Network Manager IRSCP VPN A VPN B VPN A VPN B VPN B VPN A Network side: Dynamic VPN mapping with IRSCP On connected to cloud platform Pre-configure VPN interfaces with Route-targets IRSCP re-writes the RTs as needed to dynamically map these interfaces into specific VPNs Page 7

8 System Components - Cloud Domain Remapping Cloud Manager Server Server Server Server Server Switch CE Router CE Cloud Computing Platform On Cloud Computing Platform side, the Cloud Manager : Dynamically creates and configures a logical router on a physical router platform Create virtual machine with requested images and configuration Hook all of them together with appropriate VLANs Page 8

9 host rcs4 Dynamic VPN re-mapping RT 222:1 VPLS example IRSCP 1 2 P RT 222:1 host rcs RT 222:2 Map purple VPLS VPN into green VPLS VPN host rcs VPLS VPN information distributed between s using BGP via IRSCP (acting as a route-reflector) VPLS VPN membership determined by route-targets associated with the VPN interfaces and distributed via BGP IRSCP re-writes route-targets as needed to facilitate mapping Page AT&T Intellectual Property. All rights reserved.

10 host rcs4 Dynamic VPN re-mapping RT 222:1 1 VPLS example IRSCP P RT 222:1 2 host rcs policy-statement FROM-3 { term a { policy-statement TO-3 { from { 3 term a { protocol [ bgp l2vpn ]; from { RT 222:2 community 2222; # purple protocol [ bgp l2vpn ]; then { community delete 2222; community add 2221; #green accept; host rcs community 2221; #green then { community delete 2221; community add 2222; # purple p accept; Page 10 community 2221 members target:222:1; #green community 2222 members target:222:2; # purple 2009 AT&T Intellectual Property. All rights reserved.

11 WAN Migration Optimization Once connectivity is setup, migration requires Storage Migration Live Memory Migration Storage Migration is done through a combination of Asynchronous Copy of disk storage to remote site initially Synchronous copy of incremental updates subsequently during live memory migration Live Memory Migration needs to balance multiple needs Total Migration Time for live memory (reduced application performance) Pause Time (application has to be quiescent for final transfer) Amount of Data Transfer (Bandwidth Requirement) Page 11

12 Summary Cloud Computing for enterprises requires: Security Transparency Flexibility CloudNet can help provide these features Defines interface between cloud platform and network provider Uses VPNs for secure, seamless connections Employs virtualization at server, router, and network levels to improve agility and efficiency i Current Work Algorithms to optimize migration time, pause time and network bandwidth requirements for WAN migration How CloudNet can help Disaster Recovery and Business Continuity Page 12